Finding systems using SMB1?

Hi Experts,

Is there a easy way to detect systems on my network using SMB1?  I see that it is installed on some of our servers, and we are also using SMB ISCsci storage for our Hyper V's, but I don't want to have to go to every server and see if it's enabled, I'd like to be able to view everything and see not only where it's enabled, but if it's being used.

I have Microsoft Message Analyzer but am stuck as of typing this.

Thank you in advance.

Who is Participating?
JohnBusiness Consultant (Owner)Commented:
If you have anything below Windows 7 or Server 2008 AND IF all systems at or above Windows 7 or Server 2008, you can assume the old workstations and servers are at risk.
You could set up a system with Wirrshark and monitor traffic. That way you can see what systems are actually sending SMB v1 traffic.
Dr. KlahnPrincipal Software EngineerCommented:
Is there a easy way to detect systems on my network using SMB1?

Push a GPO or registry patch to disable SMB1 on all servers, and then see which client machines fail.
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

klsphotosAuthor Commented:
Thank you everyone!  I thought about doing the GP disable, but am unable to do that.  We do have some older servers (2008) that we are migrating services off of, I am suspecting some of them are.  I'm still trying to figure out how to confirm it on our storage servers that are hosting the storage for our Hyper v hosts.

All workstations are windows 10.
JohnBusiness Consultant (Owner)Commented:
Thanks for the update.
Shaun VermaakTechnical Specialist/DeveloperCommented:
Without any tools? Low tech Honeypot. Create an SMB1 share and force all clients to create a file there (with GPO or the like), perhaps %COMPUTERNAME%.txt. Any computer that can create a file, fails adit.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.